Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 6 hours ago

Identity & Access Management Engineer

SonarSource121 open roles

Where
Geneva
Work mode
On site
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowIdentity & Access Management EngineerSonarSource · Geneva

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on SonarSource's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

12.9% of postings close within 7 days. Measured by our own scanner across the market. SonarSource postings stay open a median of 57 days.

Share of postings closed within
  1. 2.2%1 day
  2. 4.7%3 days
  3. 12.9%7 days
  4. 21.0%14 days
  5. 35.6%30 days
  6. 58.5%60 days
This job: posted 6 hours ago

SonarSource median: 57 days open

The posting

Who is Sonar?

Sonar enables organizations to ship agentic code with confidence. Code creation is abundant, but confidence is scarce. Our core platform, SonarQube, verifies over 750 billion lines of code every day, delivering agentic verification and governance for all code. Trusted by more than 7 million developers and 75% of the Fortune 100, including teams at Nvidia, ServiceNow, Booking.com, Goldman Sachs, AstraZeneca, and Ford Motor Company, Sonar enables organizations to reduce outages, improve security, and lower the cost and risk of agentic software development.

Founded in Geneva and now headquartered in Austin, Texas, Sonar has a global team working across offices and hubs, including Silicon Valley, London, Bochum, Barcelona, Singapore, Tokyo, and the Washington, D.C. area. At Sonar, we’re enabling enterprises to build agentic software factories that can move quickly while maintaining the control, consistency and evidence required to ship with confidence.

Position description

We are looking for an experienced Identity & Access Management (IAM) Engineer to design, build, and operate the identity platforms that secure access to our applications, infrastructure, and data. You will own the technical direction of our IAM ecosystem, including authentication, authorization, lifecycle management, and privileged access. You will work with security, IT, engineering, and compliance teams to deliver a secure, scalable, and user-friendly access experience aligned with Zero Trust principles.

What you will do

  • Design, implement, and maintain enterprise IAM solutions, including SSO, MFA, federation, and directory services.
  • Architect and manage identity lifecycle processes (joiner/mover/leaver), automating provisioning and deprovisioning across SaaS, cloud, and on-prem systems.
  • Implement and operate Privileged Access Management (PAM), including vaulting, session management, and just-in-time access.
  • Lead Identity Governance and Administration (IGA) initiatives such as access reviews, certifications, role-based access control (RBAC), and segregation-of-duties controls.
  • Integrate applications with the identity platform using SAML, OIDC, OAuth 2.0, SCIM, and LDAP.
  • Develop automation and tooling (APIs, scripts, CI/CD pipelines, Infrastructure as Code) to reduce manual identity operations.
  • Secure cloud identity and access across AWS, Azure, and/or GCP, including IAM policies, workload identity, and service accounts.
  • Define and enforce authentication and authorization standards, policies, and best practices.
  • Monitor identity-related threats and support detection and response for account compromise, credential abuse, and privilege escalation.

Experience and qualifications

  • 6 to 15 years of experience in IAM, security engineering, or a related field.
  • Hands-on experience with at least one major IAM platform such as Okta, Microsoft Entra ID (Azure AD), Ping Identity, ForgeRock, SailPoint, or CyberArk.
  • Strong knowledge of identity protocols and standards: SAML 2.0, OAuth 2.0, OpenID Connect, SCIM, LDAP, and Kerberos.
  • Experience with Active Directory and directory services architecture.
  • Proficiency in at least one scripting or programming language (Python, PowerShell, Go, Java, or JavaScript).
  • Solid understanding of cloud IAM models (AWS IAM, Azure RBAC, GCP IAM).
  • Experience with MFA, passwordless, and conditional or risk-based access.
  • Familiarity with Zero Trust, least privilege, and defense-in-depth principles.
  • Strong analytical, problem-solving, and communication skills.

Additional comments

This role is based in Geneva. We are unable to consider candidates unwilling to be in Geneva, but we are willing to relocate the right candidate.

We value diversity, equity, and inclusion

At Sonar, we believe that our diversity is our strength. We are a global company that values and respects different backgrounds, perspectives, and cultures. We are committed to fostering a diverse and inclusive work environment where everyone feels valued and empowered to contribute their best. We are proud to be an equal opportunity employer and welcome all qualified applicants, regardless of race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status.

If you need any accommodation, please reach out to us at [email protected].

All offers of employment at Sonar are contingent upon the results of a comprehensive background check and reference verification conducted before the start date.

Applications that are submitted through agencies or third party recruiters will not be considered.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against SonarSource's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on SonarSource's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    SonarSource's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.